The real info is retained inside of a separate area, for instance a secured offsite platform. The initial data does not enter your IT environment. If an attacker penetrates your setting and accesses your tokens, they may have gained nothing at all. Therefore, tokens can't be employed for prison